Amendments to the Claims: j 

Re-write the claims as spt^orth below. This listing of claims will replace all prior versions and 
listings, of claims in tj^e apphcation: 

Listing of Claims: 

1 . (Original) A method for providing information security comprising the steps of: 
determining a digital signature verification error based on a received message header 

identifier associated with a public key certificate identifier; and 

generating a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier. 

2. (Original) The method of claim 1 wherein the step of generating the digital signature 
verification map includes storing at least one acceptable message header identifier as a digital 
signature verification map entry in response to determining the digital signature verification 
error. 

3. (Original) The method of claim 1 wherein the step of generating the digital signature 
verification map includes mapping the plurality of acceptable message header identifiers on a per 
certificate subject identification data basis. 

4. (Original) The method of claim 1 including the step of verifying a digital signature 
associated with received message information based on the digital signature verification map. 
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5. (Original) The method of claim 1 including the step of receiving digital signature 
verification map update data and updating the digital signature verification map with at least one 
acceptable message header identifier based on a received message header K). 

6. (Original) The method of claim 1 wherein the message header identifier includes at least 
one of data representing an email address of a sender, a telephone number of a sender and an 
identifier associated with a sending unit. 

7. (Original) The method of claim 1 including the step of digitally signing the digital 
signature verification map to provide a trusted digital signature verification map. 

8. (Original) The method of claim 1 including the steps of: 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject alias; and 

displaying the at least one subject alias in response to verifying a digital signature 
associated with the public key certificate identifier. 

9. (Original) The method of claim 1 wherein the step of determining a digital signature 
verification error includes the steps of 

comparing the public key certificate identifier with the message header identifier to 
determine if a mismatch is detected; 

if a mismatch is detected, generating a mismatch notification for an operator; and 
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verifying a digital signature based on a verification key associated with the pubHc key 
certificate identifier. 

10. (Original) A method for providing information security comprising the steps of: 
determining a digital signature verification error based on a received message header 

identifier associated with a public key certificate identifier; 

generating a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier by storing at least 
one acceptable message header identifier as a digital signature verification map entry in response 
to determining the digital signature verification error; and 

verifying a digital signature associated with received message information based on the 
digital signature verification map. 

11. (Original) The method of claim 10 wherein the step of determining a digital signature 
verification error includes the steps of: 

comparing the public key certificate identifier with the message header identifier to 

determine if a mismatch is detected; 

if a mismatch is detected, generating a mismatch notification for an operator; and 
verifying a digital signature based on a verification key associated with the public key 

certificate identifier. 
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12. (Original) The method of claim 10 wherein the step of generating the digital signature 
verification map includes mapping the plurality of acceptable message header identifiers on a per 
certificate subject identification data basis. 

13. (Original) The method of claim 1 1 including the step of receiving digital signature 
verification map update data and updating the digital signature verification map v^ith at least one 
acceptable message header identifier based on a received message header ID. 

14. (Original) The method of claim 10 wherein at least one of the plurality of message 
header identifiers includes at least one of data representing an email address of a sender, a 
telephone number of a sender and an identifier associated with a sending unit. 

15. (Original) The method of claim 13 including the step of digitally signing the digital 
signature verification map to provide a trusted digital signature verification map. 

16. (Original) The method of claim 10 including the steps of: 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject alias; and 

displaying the at least one subject alias in response to verifying a digital signature 
associated with the public key certificate identifier. 

17. (Original) A method for providing information security comprising the steps of: 
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determining a digital signature verification error based on a received message header 
identifier associated with a pubhc key certificate identifier; and 

updating a digital signature verification map to add an acceptable message header 
identifier associated with the public key certificate identifier. 

18. (Original) The method of claim 17 including the step of verifying a digital signature 
associated with received message information based on the digital signature verification map. 

19. (Original) The method of claim 17 wherein the step of determining a digital signature 
verification error includes the steps of: 

comparing the public key certificate identifier with the message header identifier to 

determine if a mismatch is detected; 

if a mismatch is detected, generating a mismatch notification for an operator; and 
verifying a digital signature based on a verification key associated with the public key 

certificate identifier. 

20. (Original) An apparatus for providing information security comprising: 

a processing module operative to determine a digital signature verification error based on 
a received message header identifier associated with a public key certificate identifier; and 
operative to generate a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier; and 
memory, operatively coupled to the processing module, containing the digital signature 
verification map 
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21. (Original) The apparatus of claim 20 wherein the memory stores at least one acceptable 
message header identifier as a digital signature verification map entry. 

22. (Original) The apparatus of claim 20 wherein the processing module maps the plurality 
of acceptable message header identifiers on a per certificate subject identification data basis. 

23. (Original) The apparatus of claim 20 wherein the processing module includes a 
cryptographic engine operative to verify a digital signature associated with received message 
information based on the digital signature verification map. 

24. (Original) The apparatus of claim 20 wherein the processing module updates the digital 
signature verification map with at least one acceptable message header identifier based on a 
received message header ED. 

25. (Original) The apparatus of claim 20 wherein the message header identifier includes at 
least one of data representing an email address of a sender, a telephone number of a sender and 
an identifier associated with a sending unit. 

26. (Original) The apparatus of claim 20 wherein the processing module digitally signs the 
digital signature verification map to provide a trusted digital signature verification map. 
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27. (Original) The apparatus of claim 20 wherein the processing module generates a trusted 
alias map containing the pluraUty of acceptable message identifiers and at least one associated 
subject ahas, and displays the at least one subject alias in response verifying a digital signature 
associated with the public key certificate identifier. 

28. (Original) The apparatus of claim 20 wherein the processing module determines a digital 
signature verification error by comparing the public key certificate identifier with the message 
header identifier to determine if a mismatch is detected; if a mismatch is detected, generating a 
mismatch notification for an operator; and 

verifying a digital signature based on a verification key associated with the public key certificate 
identifier. 

29. (Original) A storage medium comprising: 

memory containing executable instructions that when read by one or more processing 
units causes one or more processing units to: 

determine a digital signature verification error based on a received message 
header identifier associated with a public key certificate identifier; and 

generate a digital signature verification map containing a plurality of acceptable 
message header identifiers associated with the public key certificate identifier. 

30. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to generate the digital signature 
verification map by storing at least one acceptable message header identifier as a digital 
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signature verification map entry in response to determining the digital signature verification 
error. 

3 1 . (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to map the plurality of acceptable 
message header identifiers on a per certificate subject identification data basis. 

32. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to verify a digital signature associated 
with received message information based on the digital signature verification map. 

33. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to receive digital signature verification 
map update data and update the digital signature verification map with at least one acceptable 
message header identifier based on a received message header ID. 

34. (Original) The storage medium of claim 29 wherein the message header identifier 
includes at least one of data representing an email address of a sender, a telephone number of a 
sender and an identifier associated with a sending unit. 

35. (Original) The storage medium of claim 29 wherein the memory contains executable 
instructions that cause the one or more processing units to digitally sign the digital signature 
verification map to provide a trusted digital signature verification map. 
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[[35.]] 36. (Currently amended) The storage medium of claim 29 wherein the memory 
contains executable instructions that cause the one or more processing units to: 

generate a trusted alias map containing the plurality of acceptable message identifiers and 
at least one associated subject alias; and 

display the at least one subject alias in response verifying a digital signature associated 
with the public key certificate identifier, 

[[36.]] 37. (Currently amended) The storage medium of claim 29 wherein the memory 
contains executable instructions that cause the one or more processing imits to determine a 
digital signature verification error by: 

verifying a digital signature based on a verification key associated with the public key 
certificate identifier; 

if verification is successful, comparing the public key certificate identifier with the 
message header identifier to determine if a mismatch is detected; and 

if a mismatch is detected, generating a mismatch notification for an operator. 

[[37.]] 38. (Currently amended) A method for providing information security comprising the 
steps of: 

generating a trusted alias map containing the plurality of acceptable message identifiers 
and at least one associated subject alias; and 

displaying the at least one subject alias in response to verifying a digital signature 
associated with a public key certificate identifier. 
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[[38.]] 39^ (Currently amended) The method of claim [[37]] 38 wherein the step of 
generating the trusted alias map includes digitally signing the trusted alias map, and wherein the 
method includes the step of verifying trusted alias map digital signature prior to displaying the at 
least one subject alias. 



CHICAG0/#1218963.1 



11 



